115e22102a25b695c48d05297eb82ef5e211dfc21b7271c661dca8cf9b7b9ea3

Sharing

Copy URL Twitter E-mail

General

Target
115e22102a25b695c48d05297eb82ef5e211dfc21b7271c661dca8cf9b7b9ea3
Size 416KB
Sample221119-ts426aeb2y
SHA256 115e22102a25b695c48d05297eb82ef5e211dfc21b7271c661dca8cf9b7b9ea3
MD5 4cb9f9f3325fadc2e1412218c6c3bea4
SHA1 558400ab3e413b1c95d375c9bc8aa63a68a59872
SHA512 5baff70d6cd075cc46a8c20e56d17eddf72c3b287e8fff73bb75ee859d69abd186d8d3ed26f5dc23a60c4c1275bd8ec301feda1d949d90398a70667381880b47
SSDEEP 6144:D+QzavrB/086i3+l86EdgDmlSDHwvxYGrLs1QfsfVQADdazw/6IWd9vA/N:D5zav93jhdWTw92QEfV4t9vu
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

115e22102a25b695c48d05297eb82ef5e211dfc21b7271c661dca8cf9b7b9ea3

.exe 416KB

115e22102a25b695c48d05297eb82ef5e211dfc21b7271c661dca8cf9b7b9ea3

IMPHASH 4fa37bd567957b54ac8f2716087bd143
SHA256 115e22102a25b695c48d05297eb82ef5e211dfc21b7271c661dca8cf9b7b9ea3
MD5 4cb9f9f3325fadc2e1412218c6c3bea4
SHA1 558400ab3e413b1c95d375c9bc8aa63a68a59872
SHA512 5baff70d6cd075cc46a8c20e56d17eddf72c3b287e8fff73bb75ee859d69abd186d8d3ed26f5dc23a60c4c1275bd8ec301feda1d949d90398a70667381880b47
SSDEEP 6144:D+QzavrB/086i3+l86EdgDmlSDHwvxYGrLs1QfsfVQADdazw/6IWd9vA/N:D5zav93jhdWTw92QEfV4t9vu
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

28551

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

user32

GetKeyboardLayoutList GetDC GetMenuCheckMarkDimensions GetMonitorInfoA GetSysColor GetSystemMetrics ReleaseDC SystemParametersInfoA GetKeyboardLayout EnumDisplayMonitors

kernel32

GetShortPathNameA GetStringTypeExW GetSystemDefaultLCID GetSystemDirectoryW GetSystemInfo GetSystemTimeAsFileTime GetSystemWindowsDirectoryW GetTempPathW GetTickCount GetTimeZoneInformation GetUserDefaultLCID GetVersion GetVersionExA GetVersionExW GlobalAlloc GlobalFree GlobalMemoryStatus HeapAlloc HeapCreate HeapDestroy HeapFree HeapLock HeapReAlloc HeapSize HeapUnlock InitializeCriticalSection InitializeCriticalSectionAndSpinCount GetModuleFileNameA InterlockedExchange IsDBCSLeadByte IsDebuggerPresent IsProcessorFeaturePresent IsValidCodePage IsValidLocale LeaveCriticalSection LoadLibraryA LoadLibraryExW LoadLibraryW LocalAlloc LocalFree MultiByteToWideChar OpenMutexA OutputDebugStringA QueryPerformanceCounter GetProcessTimes ReleaseMutex ReleaseSemaphore RemoveDirectoryW SetFileAttributesW SetLastError SetLocalTime SetUnhandledExceptionFilter Sleep TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue UnhandledExceptionFilter VirtualAlloc VirtualFree VirtualProtect WaitForSingleObject WideCharToMultiByte WriteFile GetLocalTime GetLastError GetFileType GetFileAttributesW GetDiskFreeSpaceExW GetCurrentThreadId GetCurrentThread GetCurrentProcessId GetCurrentProcess FreeLibrary FormatMessageW FindNextFileW FindFirstFileW FindClose ExpandEnvironmentStringsW EnterCriticalSection DeleteFileW DeleteCriticalSection CreateSemaphoreA CreateMutexA CreateFileW CreateDirectoryW CompareStringW CloseHandle GetProcessHeap GetProcAddress GetModuleHandleW GetModuleHandleA RaiseException GetModuleFileNameW InterlockedCompareExchange

advapi32

SetSecurityDescriptorDacl AddAccessDeniedAce RegisterTraceGuidsA RegSetValueExW RegSetValueExA RegQueryValueExW RegQueryValueExA RegQueryInfoKeyW UnregisterTraceGuids TraceEvent RegOpenKeyExW RegOpenKeyExA RegEnumKeyW RegCreateKeyExW RegCloseKey OpenThreadToken OpenProcessToken IsValidSid InitializeSecurityDescriptor InitializeAcl GetTraceLoggerHandle GetTraceEnableLevel GetTraceEnableFlags GetTokenInformation GetSecurityDescriptorDacl GetLengthSid FreeSid CopySid ConvertStringSecurityDescriptorToSecurityDescriptorW ConvertSidToStringSidA CheckTokenMembership AllocateAndInitializeSid AddAccessAllowedAce

ole32

CoTaskMemAlloc CoTaskMemFree

shlwapi

SHDeleteKeyW

version

VerQueryValueW GetFileVersionInfoW GetFileVersionInfoSizeW

rpcrt4

UuidCreate

shell32

SHGetSpecialFolderPathW

gdi32

DeleteObject DeleteDC CreateSolidBrush CreateDCA GetDeviceCaps

dbghelp

ImageRvaToVa FindExecutableImage GetTimestampForLoadedLibrary ImageRvaToSection FindExecutableImageEx ImagehlpApiVersion

dsound

ord9